{ "id": "CVE-2024-2758", "sourceIdentifier": "cret@cert.org", "published": "2024-04-03T18:15:07.380", "lastModified": "2024-05-01T18:15:19.300", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately." }, { "lang": "es", "value": "Los l\u00edmites de velocidad de Tempesta FW no est\u00e1n habilitados de forma predeterminada. O est\u00e1n configurados demasiado grandes para capturar ataques de frames de CONTINUACI\u00d3N vac\u00edos o demasiado peque\u00f1os para manejar adecuadamente las solicitudes HTTP normales." } ], "metrics": {}, "references": [ { "url": "http://www.openwall.com/lists/oss-security/2024/04/03/16", "source": "cret@cert.org" }, { "url": "https://github.com/tempesta-tech/tempesta/security/advisories/GHSA-3xwj-5ch3-q9p4", "source": "cret@cert.org" }, { "url": "https://www.kb.cert.org/vuls/id/421644", "source": "cret@cert.org" } ] }